SharePoint Security for the Site Owner ERIC RAFF – eric.raff@journeyteam.com

Expert Level Consultants – Highest level of certifications We have over 25 years experience and are a Microsoft Gold Partner Expert Level Consultants – Highest level of certifications Exceptional Project Managers – Comprehensive and Secure Solutions

Quick Introduction At JourneyTEAM for 3+ years In IT industry for 22+ years Director of JourneyTEAM cloud practice Cloud Solutions Architect Identity & Access Management Architect SharePoint Architect Exchange Server Engineer OCS/Lync Engineer GroupWise Guy Published Author / Teacher

Who can I share with? Internal Users / Groups Guest Users – Org accounts OR Microsoft Accounts Anonymous users

How do I govern what my people can share? Tenant level settings Site specific settings – can be more restrictive-not less Azure AD Guest Inviter Role or Global Admins can create guest users Can build Flow that integrates with Graph API for automated guest user creation and governance

How do I govern what my people can share?

How do I govern what my people can share? O365 Group sites – in NEW portal Classic sites in current portal

What permissions can I give to whom? NEW Sharing / Linking: View only or View & Edit Classic SharePoint Permissions

How do I know what has been shared with whom? Make sure This is enabled:

How do I know what has been shared with whom? The O365 Way Query Audit Logs Export to Excel & Analyze 3rd Party Way Sharegate Metalogix

Can I set sharing to expire? OneDrive Sharing: SP Tenant

What do I ask the admin for and what can I do myself? Admin governs tenant sharing settings Admin governs Site Collection sharing settings Site Collection Admin controls all permissions inside the site collection

What controls exist to secure the export or downloading of content? Azure Information Protection with Rights Management Apply encryption to content regardless of where it is stored Enable:

What controls exist to secure the export or downloading of content? Per Document Library IRM Policy Use AzureAD Conditional Access – integrated with SPO:

Is multi-factor authentication available for SharePoint access? YES

What about mobile access? Mobile Apps – OneDrive, Teams, Groups

Thank You! Eric Raff Tim Andersen Director, Cloud Practice 801-589-1518 eric.raff@journeyteam.com Tim Andersen Regional Vice President - Eastern 615-973-5553 tim.andersen@journeyteam.com